FediScanner

#ssh

← Back

Looking for **3-5 beta testers** for **NovaTerm**, a Linux terminal inspired by ProComm Plus. If you actively use BBSes via SSH/Telnet, ANSI, and Zmodem, I'd love your help testing the pre-1.0 release. Please run the smoke tests and send detailed results (host, protocol, expected vs. actual behavior, screenshots if needed). Releases: github.com/njb1966/novaterm/re Contact: admin@njb1966.com for more info and testing specifics.

Show Original PostReport

A Djinn in the Machine: TaskWeaver's Node.js Intrusion Chain

An intrusion was investigated that began with exploitation of CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp RMM software. The threat actor obtained unauthorized technician access and deployed two previously undocumented malware samples: TaskWeaver and Djinn Stealer. TaskWeaver is a heavily obfuscated Node.js loader that establishes encrypted communications and delivers additional payloads. Djinn Stealer targets credentials across Windows, macOS, and Linux systems, collecting authentication data for cloud platforms, source control, package registries, AI development assistants, browsers, SSH keys, and cryptocurrency wallets. The attacker leveraged legitimate RMM capabilities to transfer files and execute commands across managed systems. Stolen AI assistant tokens provided extensive access to repositories, databases, and cloud accounts. The intrusion demonstrated how a single authentication bypass in trusted management infrastructure can enable widespread credential theft and p...

Pulse ID: 6a432365e2207bde8681b975
Pulse Link: otx.alienvault.com/pulse/6a432
Pulse Author: AlienVault
Created: 2026-06-30 02:01:09

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Cloud #CyberSecurity #InfoSec #Linux #Mac #MacOS #Malware #Nodejs #OTX #OpenThreatExchange #RAT #RCE #Rust #SSH #Vulnerability #Windows #bot #cryptocurrency #AlienVault

Show Original PostReport

#Apple has a new enough OpenSSH to support USB security keys, but disables that support in their `ssh-agent` 💩

I had a complicated cross-platform #SSH approach in my shell configuration for years, but today landed on "if macOS + homebrew, then unset SSH_AUTH_SOCK and always use homebrew OpenSSH"

Show Original PostReport

🚨 Kritische libssh2-Lücke: Ein Proof-of-Concept-Exploit wurde veröffentlicht. Ursache: fehlende Begrenzung von „packet_length“ in ssh2_transport_read()—Angreifer können manipulierte SSH-Pakete senden und Speicher auf dem Heap durcheinanderbringen (CVE-2026-55200, CVSS 9.8). Update prüfen: heise.de/news/Kritische-libssh 🔐 #CyberSecurity #Vulnerability #CVE #SSH #libssh2

Show Original PostReport

🌗 為 SSH 打造原生圖形化殼層
➤ 重新定義遠端伺服器:從文字介面轉向原生圖形化體驗
probablymarcus.com/blocks/2026
針對如何遠端操作伺服器,作者提出了「Outer Shell」架構,旨在打破傳統終端機介面的限制。該概念將伺服器上的應用程式視為獨立的微型 HTTP 伺服器,並透過 SSH 加密隧道與本地設備進行圖形化交互。透過利用 Unix 網域通訊端(Unix Domain Sockets)而非傳統網路埠,不僅強化了安全性,還簡化了開發流程。這種架構讓伺服器能像現代作業系統一樣,提供具備原生體驗的應用程式介面,為遠端運算開闢了全新的發展路徑。
+ 這正是我們需要的!多年來我們一直依賴笨重的 VNC 或 SSH 轉發,能有這種原生的輕量化圖形層絕對會改變開發者管理伺服器的流程。
+ 很有趣的思維實驗,但安全性與相容性是最大挑戰。雖然使用 Unix Domain Sockets 很聰明,但如何處
技術

Show Original PostReport